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mm^s] mmm 
m&m i ] 

* zsOrmmnnfemv. p^mmtL. x>ptfe6x!c#it, x * (2 
* n) mod p z$iw?z>mmmmjjmizmi<^T, mzp. a^ib^x, mp* 

hM^ratL, AiJ-fit^rx* (2'n) mod PlZ^m-t ZVgiZ. 2 A ( 2 m+n) m 
od P$:It^-t^*\ ^S^lif^tlt^^ ^^^'JU^ilCi'Jxl 
= x * 2 " (2 m + n) * (2 A ( - m) ) mod P= x * 2 * (m+n) mod P 
SrffirU ^Cx2:=xl* (2 " (- m) ) mod P= x * (2 * n) mod 
PSrltH-fSr £IZ£ y, x nod P$:i(C^5z:i:jtaEl(Cx* (2 " n) mo 

' S^^IItglU PfcHUfc^U x>PtS§x(:flt > x* (2 
A n) mod P £ft||^S'fi#^;£&{c^VNT, &£P, Aijffifcx, 

h^Srmi: U> A^ffi^x * (2 A n) mod PSC^f SfgUC, 2 "(m+2n) n 
od P£ftJ§Lir-£2>\ feS^lif^tltfct, -E>df* U^^^^iCJ: *J 
x 1 = x * 2 " (m + 2 n) * ( 2 * (- m) ) mod P= x * 2 " (2 n) mod 
P&tHSU ££{Cx2:=xl* (2 A (-n) ) mod P= x * (2 A n) mo 
d P&tMTT 33 ^{Ci: U> x mod P$:|®tC^fe^> 3 fc&UCx * (2 A n) m 
od P &ItIt^3i:§:#Ii:tSiMm 

m*P. Ai7ffi£x, &P SfefttC^S^J&tTy hWL*. n, AiJ# 

h^t^'lTstf^i®^^i»0^^lt, x A d mod 

p a^mm&mw.zft^mm&mxmizts^x, s v *, b^^mvftL&mm 

© i#B©*gt££d[i] £ x " d [ilBodPSSHr-rsf^fcytC (2 A n 
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) * (2 A s - 1) * x * d[i]mod PZm^XmM%:fil<\ (2*n) * (2 " 
n-l)*x*d mod P§:ff#L^#, 2* (-n) " ( 2 " n - 1 ) m 
od P^iCT, x"d mod P$:ftIt53i:&#Sii:tSffiTO 

[0 0 0 1 ] 

[3§^cDMt-3&fl5#W] 

[0 0 0 2] 

RSAtf>^jg^|f#igtf) CRT (Chinese Remainder Theory) W.MJj3CT:IZ. ft^tf) 
-#MJtf>;*5^y ^Tx mod P 5:itlt5 0 CRT$RI|#;i£©&S#JB&01 tC 
pT*M^bfc«{cMt/TffJ^#3li$gW£fT^ (10 10) , q T* 
M7bLfc.mzM~?Z'<%mM&$inZfto (10 2 0) „ lt{:2o©^§i» 
3ftSlllC«*&#«L ( 1 0 3 0) S^#Jfc^m£#& 0 ft1SI©pT?*7cLfc«CZ) 
U^^^^m (10 10) J3<fc^q"eit7GLfeffi©^^m»^^ (1 0 2 0 

[0 0 0 3] 

1010, 1 0 2 o<Ds<gmtmz.itmw;, 7f03>fx^f>^^^ 

-5 0 Tt-V >^jc-f ££x.tf. Z=A"L $:im-r§^-a-> *g^L£^ 

L=L[n-l]*2" (n-l)+L[n-2]*2"(n-2)+ - + L [1] *2" 1+L [0] *2* 0 (^1) 
Z = A " L CDftlfS: 

Z := (•■•( ( (A"L[n-l])"2 * (A"L[n-2]) )*2 * - * (A"L[0]) (^2) 
HtS< 0 A"L[i]tt, L[i]=n?»*ltf, A£&*J, L [i] =0 T'&tUf, A" 0=1 
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Z= 1 

for ( i = n-1 ; i >= 0 ; i++ ) { 
W := W * W; 

if ( L[i]==l ) then Z:=Z * A; else W:=W * 1; 

} 

[0 0 0 4] 
[0 0 0 5] 

EI 2 tt^E^rf* Vffl&mMZmit^frM&OT^J t/ a >^ x-f >ic J: £^£§il 

P(c^t6xfflfJ^$:2 0 2 0-e*^§ o ^y^y^ vm-feMM-viz, 

V>m\z.r (-n) mod p #Hifib;ft3£:#), ^2*n£Mi3i:f$tfC§fl CT £ < „ Jt^-F 

o &«b^C#)R"2£it3f LT&£, U^m^^mVATx mod Pfcmi^, 

xR mod P (2 0 4 0) „ *=y 3 * V Mikmnzm^ZW. aH»0*JJ(| 

h*>£> 1 If y h^o^U ffi-r©T\ UC«±fttfy h<£>&fi£^-fn-l£ 

tg^-rs (2 0 5 0) „ fgfs:_h^tf^ h^^jiitci^^oTVN^^^ej^^M^ 

(2 0 6 0), OT'^tlH Ut*t5R&iC (2 0 7 0) , 1^5otV> 
fttf, xR mod P(=AR) £W&C^C£ (2 0 8 0) „ 1 SrSfcUfci- 5 R 2 

o7on it^^icf^^^^^vNco-e, mmmmzmm-tzm&izmm-zsm 

tf >y h & 1 fcfy Y&&Wlh (2 0 9 0), ftT&fcT y h 
£Tfc£U*V^^£fr^xy ^£?tVn (2100), iTfitf^ hit'lLT 
V\*V\»-^liSlSmS:— mL/ (2110), mWLOlkWv MC*fLT3 0 6 0 
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tt, 2 , n»otV^5ii^^;i<fc^?), 2" (-n) £31 £ § 0 *y3*vm& 

mm.r% i tKDmztmr&z.tit. 2'(-n)%mv&z.z.£mis^ 0120) 

o *&tC, JgJKtfPJgU:©*^;* (2 13 0) , P&M-f-S (2 14 0) „ -jg 

®^S©*T% 2 0 2 0 <DM£WlM(Dffimt. msizm^-^oiz, P(D®m. (3 

010) &&icp iy^-r&sjM^&s^icjioT, ^s<ffi^s*-r<5fe«> 

[0 0 0 6] 

T04 j l«>zT* UTfttfcV^&^US&JB^TTT^ J/a>fx^>CJ:5 
ZKDPtc^f^-sPJ^Sr^ibSMW^r^y ^ 3tf-r y bate 

■Tn-lSr^t-S (4 0 4 0) „ mWL±$L\Zv h ^ Affile 1 T ^ if t> 

ft (4 0 5 0) , 1 #3ioTV\;rUi % x mod P(=A) (4 0 7 0 

), tf-yhffl|^0t^il USft^iCS (4 0 6 0) , lltmV 
Z>$m4 0 6 0it tfWffimz&W*: J 3-X.&^<DT% Wl^iltSi^j: 

#B&«rtB-e&£ 0 407 o©Ms-ex mod p nm&Wimnmz&mztiz&T*, 

3 0 8 0), *T&tfy b£T£^U3f v^^&VN*§ilr«, ^&-$t (3 0 
90) , mWCMka^y ho&MZft e>„ «Tffiiff h*Tfffil^«f7Ufe«^ 

[0 0 0 7] 

[0 0 0 8] 
[»W U J: e» t L/ T V % S MU 
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m&tin-vmm m2izm-t£?izx wp<Dm&55.m (2010 © 

m.(Dmt5 x<kp T?t±, x mod p=p £ & »; fc£ x>kp<£>^§-£&. x 

mod p=0£&»K /J^&ffi£&£r iHJ&S,, x mod p <Z>lI#p&SI#£: LT* 

mm&iz. 5i2bit@itcD^^Mv\e,tiTVAS)p, q^aN^^ics^^ 

T\ »««ldtt^MaSe©(p-l)(q-l)S:^i:'rsaS7BS:tfJS[-r5 - ticj: »J, 

s mftumz. mm=L->7 y y KSBfe&tcj: y, ^^fcits^rig 

^ «fc t^g ic se -r *> cd -i? & z> o 

[0 0 0 9] 
[ffifl 5: S S?) 0 #«] 

x mod p &i£gSft3£it1* IC» 2" (m+n) mod p % L < 2" (2n) mod pZSb^fr 
£ «>x{C3l £T S3 2"(-n)^L<«, 2"n x mod p 

{C|gSC&S<£>T% 2"(-m)mod p & L < fct 2" (-n) mod p l±^-f#^E^5 „ • £. fc, 
2"n x mod p (Dffltt, A^Jx^p^ifi^Cfe S^^T?*xt P©^/MI5#IC^# U 
H^^C^J&^'fbttlS^-^-r, 2"m x mod p<7)tf>y N^ttpCDfcTy h^lC^H*; & 
S„ LfctfoT, U-^"»#^P>x^ P ©^/hS5^$:^t-Sz: i:^nrffifcfe»J 
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[0 0 10] 

*yz[* y v*fcvx##jcfcj:, #g»SI£#H*(&*ffetc, (2"(-n))"( 

2"n-l) mod P %mV. 2"n mod p £ fcJflEf S Zl i: T% lEL^^ 

£^S 0 

[0 0 1 1 ] 

^>dr^ y*i|[j6ii^©»jft3Rj|[SMv^-&»^tt, ii^gi^fom r"(- 

2) mod pliDS. &e>fr£«> R"(-2m) mod p £ ff|* L T £ £ , «^}CR" (-(2" 
m)+l) mod p ZmVTffilELXb <fcV*. 
[0 0 12] 

x&feMiz&mft^y h^, n £ P<Z)&Mic*&M&t^y h:R£t-£o O^x^P 
* Q^S©^ ^fm^nt^S. £ U=2"U_SQR=2" (2n)U mod P^ff^f 
& (5 0 3 0) 0 U_SQR=2" (2n)U mod P£|f SP^^>f¥*ffl ^^£LSI ^ D - £gf 

7{C^-T 0 S7T:'tt, 2"L*U mod P ©if ;ftT rt^ L=2n£ L/T, 

HV©*^^^-^^-^*. U_SQR©tfy h;R&> m-2n& L/ < itnCD 
*V^<7)t^y h;gUC&S 0 5 0 4 0 CDff Ute, 

A_R = (x * U_SQR + M*p ) / 2"m (j£ 3 ) 

fcfc»J, x<2*m % M<2 A m-efe^(Z)7:\ 

A_R < U_SQR + p (5^4 ) 

£.ft£o P©t?*y b&ten£ATV$>Z><DT*. A_R©lfy MAX(m-2iu n) £ & 

m-2n < n (*S 5 ) 

m < 3n 6 ) 

T'&3i&M#&So MS©^^> m=2n<3n T^S©T\ A_R©bT^y h;Riin£& 
So 5 0 5 0©M?:l?9iC{t 5 0 4 OOMS^MTt^SM^feS 
o m < 3n (D&ftZmfrZ&^M&lZlZ, m 6 \ZB"? S!I©HJ6«lC <fc £ 
C>o 5 0 5 0ffl«WST't<L 
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( A_R + (-A_R*p*(-l) mod 2*n) * p ) / 2"n (j£ 7 ) 

T?&<5#, A_R < 2*n jfro (-A_R * p" (-1) mod 2*n) < 2"n TffeSCDT?, 

( A_R + (-A_R*p"(-l) mod 2"n) * p ) / 2*n < 1+p (5$ 8 ) 

&1*5 0 5 0©^3S©lfe© A_R fcfc pJKTiU&y, nfcfy h^T?&3BT?£ 
& 0 5 0 5 OtAJffif ^P^^K&SCQIt x<Dfeifip<Dm&H&&m& 

5030^^5050 $.n<D#m*m:j£T*mm-t&£. 

A_R = x * 2"(2n) * 2" (m) * 2" (-m) * 2(-n) mod P (^C 9 ) 

= x * 2" (2n+m-m-n) mod P (iC 1 0 ) 

= x * 2"n mod P (5£ 1 1 ) 

5 0 5 O^0MH M3 <D3 0 5 OM&OMMtm— T*$>£ 0 x<Dmtfv<D 

mm£&^T^z>m&. m2fp<D2 130, 214 0 (DmmizxmmmizmiE^ 

[0 0 1 3 ] 

* Q-e&5<Z>T*, Mm^n^S. * f\ L=n+m<£; bt, EI 7 SC^tS *l£ 
7U-\Z'fe-oX, U'_SQR=2" (n+m)U mod P&ftlf^ (6 0 3 0) „ 6 0 4 0 
fe&ISimZftSfc&lzm' _SQR<D¥y bmt*&>TT*$>Z>i&^tf2bZ>1)K U'_SQR 
\*&-fn\Zy NJ^T{C&£ 0 6 0 5 0 (Dj&MTH*. 

( A_R + (-A_R*p"(-l) mod 2"m) * p ) / 2"m (^12) 
T?&"5A^ A_R < 2"n (-A_R * p" (-1) mod 2"m) < 2"m X$>£(DX\ 

( A_R + (-A_R*p"(-l) mod 2"m) * p ) / 2"m < 1+p (^13) 
M 6 0 5 OCMOtffl A_R it PUT ntfy h&X*mmX*g 
6 0 5 0T'A_Rffii^pi:^l<^§©H x©fl[««p(Z>fl|8ti:ai-B## 
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6030^^ 6050 it'OM?: 1 -DO&TZWRt Z> 

A_R = x * 2" (n+m) * 2" (m) * 2" (-m) * 2(-m) mod P (^14) 
= x * 2* (n+m+m-m-m) mod P 15) 
= x * 2"n mod P (i£ 1 6 ) 

6 0 5 0»Mtt> 0 3 (D3 0 5 0 J^P$CD#13I £ £ 0 xCD-fiitf p <Z> 

^$:£&otv^i§i^ i2^©2i3o, 2 1 4 o(D#imizTmmmizmi££ 
tis 0 H5®iiihM^y, m < 3n t.^o^mttBm^\ 

[0014] 

05, m6lZB'£tl£mMMlZ!&m&. 2"L*U mod P£ftJfCt-"5iy£#J£E|7 
fC^fo 0 7©^JIg«Tfe^^ h^b^T^-T S/a >^x-T >{CJ: U> W:=2"L*R 
mod P£fflLLTVN£ 0 Wtf)MHBJ±, mtf y MCJ&£&JgT?, w= 2 * (2' 
m) mod Pi:^S^t{c-r^ 0 LS:2 5iaS:^3SLfei:§Jc, «_h&JK^oify Mc 

fCl fc&ShTy h^S^JCtt, &#T*3HJI£fT ?&I£#&S 0 Sfot, L* 
_t&J^(Z>t^y N&«iC 1 ^Mo^o fey!)^^ ^^t^Iniul UT J3 < ( 

7 0 0 5) „ 7 0 1 0©*tSl±, P0>ft_t&fc?y h#m©Jft±&fcfy htf)&g£ 
4StL<*«J:-5JCJ/7 h£L£ffi£^CT, mt^y f> tfHglCJR* § <fc e> (CT & 
«>©#tBiT?&S. 7 0 2 0. 7 0 3 0, 7 0 4 0, 7 0 5 0©«lllt Wffll± 

^xy^fcffH (7 0 6 0) iLT^St^d IBRwilCZHji&^xy^U (7 
0 8 0), lT*&*U;f, YtCL©&ef»©lfy Mcffi^f S*g*^*M34xT 
<Z)T*, WfCY£fJiC (7 0 9 0) &3#*±ffifcTv h JCjfcTJt LT 

v>fcv\»-£Ji, L<Z)«T&l^y h&glC 1 tffeSfr^-xy ^ $:fTVN (7 0 7 0) 
Jioa^&*-£tt2g»YlCW0ffi&«#"*-3. mulCDffifc^xy ? L (7 100 
) , S±TO© lf>y h 1 1 ^li CftTMo^o fei^it YiCW<D>fii£fSAL 
(7 12 0) , mu HC 1 Srgg^-rs (7130). 712 O0HH #&Y(C 
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1 £fSALT££ Y : = Y * Wt!t»t5I fc£#LV*. 7100©fi 
y?T% •tVlzm±&Mfr(D¥y h*e l ^lo^ot^Sf^H YCDffltc^ 
<Z>W<Z)|i£fitCS (7 110) „ RO^emit^&^^if^ U»^3¥7fffV^ 
(7140), L £ 1 fcf «y N£JC*/ 7 M (7 1 5 0) , 706 0 £<Z)fltS! & 

71400 Y*Y*2*(-m) mod p (DtfW-it. 

(A*A+M*p)/(2"m) (^17) 
M=-Y*Y*(p" (-D.)mod 2"m < 2"m (^18) 

(Y*Y+M*p)/(2"m) < (Y*Y+2"m*p)/(2"m) «19) 

Y&titf y h£ t <D* : £VlZfeffiVt=.ll%<D, M±&<D 0 £&2> ¥ y h (DM 

Y<2"(m-s) (S2 0) 

Y<=2"(m-s)-l (S2 1) 

(Y*Y+2"m*p)/(2"m)<=((2 A (m-s)-l)"2+2"m*p)/2 A m (^2 2) 

=2" (m-2s)-2* (l-s)+2* (-m)+p «2 3) 

<2" (m-2s)+p+l (S24) 
T*&50T*, 7 14 0©(Y*Y+Pp)/2"ii©iI^tt 10IItS^li;«± 
fiOOTf&Sfcfy s[t+l]:«2s[t]-lfcfc<5„ t£oT, 2 A (m-2s) tfp «fc y 

tj^c©^-a-«> tmtf-jrLfe»i:*±ffi^e>5iiKi'r«o©ifv h»i±, s[o]*2*(t 

-Dlt^'J, 2"(m-2s)^ P J:U ; fo/h$<^tl^ hf y h&i* p IC J: oT&)£3*l 
Z> a 8020, 8030, 8040, 8 0 5 0 (DMM'VM±^L<D 2 \f y Mi 0 IC 
S8j££*lS<Z>-C, s[0]=2fcJ&i*J, tEF8 1 4 0 SrHfTLfc^l^y hiJtli, m-2"t 
*>L<«n£&£ 0 tOEflfcli, t=lo g 2(L)T?&S©T», fcfy Mfctt, max(m 

-L, n)£;&£ 0 

[0 0 15] 

EI8{±ji^<Z)0J^m^$:M^fe^©^H^©-|g^M$:^i-o m£A#xtf) 
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D-lCt£oT, 2"n mod P£ftHU R£-T£ (8 0 2 0) „ #;{C, A^JxiC R & 
iC5 (8 0 3 0) „ S^JCffiiEfefT^feACDR.ITOTALSrtHf-rS (8 0 4 0) 

£©«afcfcP#HHgLTv*4xtf, A:fr«x£&fii,TffJ*«£i:#«riBT? 

&S<Z>T*, ^&ffJ|tOT«#LTiK^T:fc&V^ iygltf>ffi|[-£tt, £lF2"(-n)mo 
Jp^ rgjioj ©#JEtCt£oT#H*U R_INV£U Rfe«fctfR_INVS:7nlcai 
1 ©#Jli$Ct£oT, (R_INV)"(2"n-l) mod P fcffJIU R.ITOTALil f5. ii^TCD 

*b&5fc*&Ji^<&©T?, «JI©«J»MiWtt l i: u, rttf >*ijc*±ffcify h© 
&S£^-rn-l3:!g5£-r£ (8 0 5 0) „ #gft±ffilf y hfrbt&K 1 MoTV> 
Si^if^^&W-^ (8 0 6 0) , 1 #fioTV*ftli, xR mod P(=A_R) £WfC^£ 

(4 0 8 0), bfy N©'fli*<0T?*)4x«, iStfttSR&SCS (8 0 7 0) 
o fc?y htf)&g£ 1 ify hTtc^i&b (8 0 9 0) , *T&t^y htt'Ml^ 
7l/fc/)^fi^b (8 10 0) , «TffitTy h£T^3i#££U^TV^ 

mi> (8iio), fBa©^otfv h©*&aa&f?^. 8 o 7 
o, 8 0 8 o©^aTftias©®afcJt^-5^^i , R^#iaj^tf-tcmi5e)tisfe 

«), iTfi^7b*^Wi7bfei^lj:, R"(2"n-l)^^lc^^e>tlSr 
£{C&3 0 ^»C^Ce>4xfcR"(2*n-l)©i^#S:^y|»<fc«>lC, «^{CR_IT0T 
AL (8 2 1 0) &iDSo 
[0 0 16] 

EI 9 14, m&<DmM&i*P<D8 0 2 0^2" L mod &jQ l m<D—&teWV 
&Z> 0 09 ©^JKttTftlfy hfr&CDr-r-f 5/ a >fi^>tCj: U, R:=2*L mod 
Pl:ffIlT^5 0 L£2ift»3S3iUfc££tC, ft±ffiJBH^©lfy h (C 1 #j& 
Lia©liirj^Smtf»©*T*tfWT*#S^, Lft±fitf>y h^icii:^ 

hSIicl^Io^ofe^&MIoiul^tU 0JC*JSItf;LTJ3< ( 
9 0 0 5) . ^ICRS:2-e|!lMt5 (9010) . #m&m±tiLX »J MCJSb 
feBR^CO^xy ZZft^ (9 0 6 0) JtLTV^ii^te, ^$tmul©M£^ x V 
H (9 0 8 0), IT'&tltf, Y|CL©l*©lf>y hiCiStS^^ttS 
tlTV^COT*, RlCYSr^tt (9 0 9 0) ISIttS. Sil&fcfy h tC * T*^S 
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0 7 0) j|ofrofc®-£liie«YJC##-r5 0 iul©|SS:fi*y^l (9 100 
(9 12 0) , multC 1 ZWtfe-tS (9130) „ 9 12 OC^Itt #5fcY{C 

fCJI£tf>R©|t$:sjtC£ (9110) „ RCDMikgmZttnL (9140), L 
£ 1 fcfy h^*>>-7 N L fcCD^ (9 15 0) , St>*9 0 6 0 j^£> <Z>#L3MlCM£o 
[0 0 17] 

HI 1 0 it, M 8 ©HJjgMtfJtf) 8 0 4 0 1?R_INV:=2" (-n) mod PSrifJI-f £#L31 
R_INV:=2"(-L) mod P5:tfIlT V^S. L £ 2J!»*3ILfcfc*K:, S_tfe 

±&t?y h»i htfmzm&izi*. &tpT*mnzifo&mtf&z 

, 0 iZ®mitVTi3< ( 1 0 0 0 5) 0 #clCR& I / Z^Mi^ Z> (1001 
0) . 1 /2 tcSaJH'ftS'rsJCH:, 1 & 1 E|:frS/:7 h"**U*J:v\# % l^i/yh 

1 0 0 6 0) Ibt^Si^H ^&multf>>fii3:5 1 xy ^ L ( 1 0 0 8 0). 1 
Tfctltf, YiC L(D&$t(D¥ v biZfflm^&^mtffemznT^&CDXu R.INV 
&CY&5HC (1 0 0 9 0) MJH^t-Sc *_fc&fcfy hiC*7?^^bTVN^VN 

M±&&>ft<D¥v h^ttiC 1 x.*j 9 fcfi^ (1 0 0 7 0) B 

o^ofe#-^tt^»Y{C«#f«. mul<Z)fli3:^xy* L (9100) , S_t& 
1 ^iDfttlo^o ti^t YtCRO-ffi&fSAl/ (9 120 
) , muHc 1 £Sg5ti*-& (9 1 3 0). 9 1 2 0 (DftkMit. #3fcYlC 1 £ftAL 
T££Y : =Y * R£$m?Z>Z.££e£L\,\ 9 100©fx>yn% f 



1 1 



£BSE#2 003-3044975 



#2003—014136 



<Dmzmvz> Olio), RCDHfjfcem&tMSL 0140), l& 1 \±v h 
a-*^? Mfc©^ 0150), #0*9 0 6 ofrb&mmicmz,, 

[0 0 18] 

Efl lte, 0 8 CDMMffltpV) 8 0 4 0"eR_ITOTAL: = (R_INV)" (2"n-l) mod P£ 

tf-»-r*«tai©— msffiiTfes. sus^i*, ^2 6izm-r j:e>tc, R_iNv*(2*n 

)lZRZm-fZZ.£lZ£*)fto a R_INV*(2*n)«, ft&g|ftRJt& n tj£?£ 

(R_INV)"(2*n-l) mod P= R_INV"(2"n) * R_INV* (-1) mod P (a£ 2 5 ) 

= R_INV"(2"n) * R mod P (^2 6) 

ft. R_ITOTAL^R_INV-e^-ffcL (110 10). o ^{C^ {HSHII Srff O tU 
»n Sr^Ifci iC-ftA (1 1 0 2 0) , R_ITOTAL<Z)pJ^g^b^ffi$:R_ITOTAL(Cf^ 
AL (1 1 0 3 0) , ijVyZmUWLi frh UiD (1 1 0 4 0), 
IER i <ZHB# 0 «fc »;%>^g»ttlti (11050), 1103 0 fr£><Z>#t3S£i^J 
ig^o *^{CR$:R_ITOTAL{CpI^mmLfeffl$:R_ITOTAL(Cf^AL ( 1 1 0 6 0) 

tffH : 

T&U, ltffBNi:SVNlcm-efeS#t bT2 &fflVN£^ L£#UI#i£ 

o 

3. :£>=t*vM&mnmu&mL. pzmmtL. x>pt*sxi:^Lt, 

x* (2 A n) mod P &ff3*r Sft#&3I£SfiJCifc^T, &£P, A^J«$:x 

Sftlf'y N*Smai, AMSrx* (2 A n) mod PJCgStr-SIRK:, 2 A ( 
2m+n) mod P&ftHf ^tt^&MjS LT fct,. ^ > if* U fdsfc^j* 
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^StC J; »Jxl=x*2 " (2 m + n) * (2 A ( - m) ) mod P= x * 2 A ( 
m+ n) mod P£ff#U $ £>tCx 2 : = x 1 * ( 2 " . (- m) ) mod P= x * 
(2 A n) mod P^ff^-r^r ilfCj: U, x mod P £ &§ f C & £ 3 £MUC x 

* (2 a n) mod p zitM.t&z.kLzmwift&mmmmmmo 

4. PfcfgjgtilU x>Ptfe6xCf It, x* (2 A n) mod P £ffj|-r 

x* (2 A n) mod P{C^1-£figfC, 2 " ( 2 m+n) mod P£ff|f £\ 
W£^#)ffl;«LT;J3£, ^E>3^ 'J ftf^fUJlJCJ: U x 1 =x * 2 A (2m+n) 

* (2 A (-m) ) mod P= x * 2 A (m+ n) mod P£ff^U $^[Cx2 : 
= x 1 * (2 A (-m) ) mod P=x * (2 A n) mod P£|f JI^S ~ £ {C j: »J 
, x mod P£&|{C;£#)S3i:jteUCx * (2 A n) mod P &ft3M* £ Z £ 

5. ^dr* yjBb&ifcutsm&^ru p&hhr^u x>pts>§ xtc^f it, 

x* (2 A n) mod P Sffff Sfit?R*t3lgSfilc;^T\ S£SP, A#ffi£x 
, i^P^it ££#>lCi&M?c#&fc?y hffcfcn, A^Mfix Sfc«>JC& 
g&hfy h«£ni£ U A^ffifcx * (2 A n) mod PtClfcSI'tSlBHC, 2 A ( 
m+2n) mod Pfcft^Sfr, V^i^&MiS LT££, > df* V ffl&fkM 

^gfC j: »J x 1 = x * 2 A (m+ 2 n) * ( 2 A ( - m) ) mod P= x * 2 " ( 
2 n) mod PfcftJlU $P>Cx2 :=xl* (2 A (-n) ) mod P=x* ( 
2 A n) mod P&fm-rsr^fCJ: y, x mod P£R§{C;£#>£ Z. UlC x * 

(2 a n) mod p zftm-tzztzmun-tzmmtHimmmo 

6. PSraBKiiU, x > P x tC#f IT, x* (2 A n) mod P fctf-B^ 
S'MMa^lC^VNT, &£P, Aijffi^rx, & P fc^^S fc&lCi&Hjfcfr 
fctfyh»&n, A:fttex&fci«^Sfc&lc#qgfct^ h;R$:m£U A#«£ 
x* (2 A n) mod PtC^H" £|gi{C, 2 A (m+2n) mod P£ff Iff S £\ &5 

v^i^#>m;g;LT;i5£, ^>dr^ usu^Kt^icj: y x 1 = x * 2 A (m+2 

n) * (2 A (-m) ) mod P=x * 2 A (2 n) mod P&fflfU $?>ICx2 
: = x 1 * (2 A (- n) ) mod P= x * (2 A n) mod Z !HZ£ 
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y, x mod P£B&C##>£r £&tUCx * (2 A n) mod P Srft^tfS 3 £: & 

y hr5o£ y £l,T s try h#©^^m?I#©^$:^bT, x A d mod 

ifcCDi#g<Z)*ii$r£d[i] £ t,£££, x A d [i]«odP&iRJM-Sf&foy (c (2 A 
n) " (2"s-l) *x A d[i]mod P£ffl ^TiHH (2'n) " (2 

A n-1) *x'd mod P^Iflltt, 2 A (-n) A (2 A n-l) 
mod PZmVT. x A d mod P &#f-J*fS £ £ 1" SfW 

8. &£P, A;*J«£x, SP^if SfcfttC^S^J&lfy hffcfcru AiJ 

7 ho'oh (Jfc'bt s If 7 hiO^tiUMSMbt, x A d mod 

ffctf) i d[i] tLLfrtg, x A d [i]«odPS:?a^frsf^fcyic (2 A 

n) A (2 A s-l) *x A d[i]mod P£/g ^TmM-Zfi W (2 A n) A (2 
A n-1) *x A d mod P^ftlLfct, 2" (-n) A (2 A n-l) 
mod PfcsHttT, x A d mod P £ff Its Zl i: ^Mt tSftj^I 

[0019] 

raw©**] 

m<»fflmmzw.mftt>-iF\ztmT*%z>r=.to, A#£^;t&#<^ m&nm&z 

8*lCJ:«ff|fBtr©x mod P©lf y hfifej:^^ >^9x>f h (fit & 2 31 
R«3iUfc»£lc l Ic&oTv^ify h©fSt) $r^i"o rgf i 3 j te^fBtcfc 
tt£> x mod PiCfg^Sx • 2 A n mod P <D if y \*&&&J\ ^ y 
V+jjLj mi 2t-|j:A*f-^©ii:x mod Pamzmbfrte 
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[0®tfm#&H&0;!] 
[01] 

I«© R S A^C R Til^0^l7 D - a 
[02] 

[03] 
[04] 

[0 5] 

Mo 

[06] 

[07] 

[08] 
[09] 
[010] 

[011] 
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[012] 
[013] 

#fg(E{C J; 5, x £ x fclfc^iStifc P T^J^ltm U fe^© ^9 7 0 
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[**«] 
[01] 



Cp: = (x mod P) dP mod P 



Cq:=(x mod 0) d0 mod 0 VI/ 



1/ 



1010 



.1020 



C:= { (Cp-Cq) Q-'modP} x Q+Cq ^ 



,1030 



END 



1 
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[02] 



( W=x dP mod POft U ") 
| " A=x modV } 



R:=2 n mod P 
R sqr :=R 2 mod P 



2030 



2040 ' 



! | Ar:=AxR s xR-imod p | | J 



2070 



W:=WxRxR-imod P 




.2050 



2200 



2Q80 



T 



YES / 



W^WxARxR-imod P 



J 




1 



W:=WxWxR- 1 mod P 



YES 



W:=W-P ^ly 



2140 



( RETURN W ) 
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4] 




-4200 

teaser 



ir:=Wxlmod P 




W:=WxA mod p| 







4100 




( RETURN ) 
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[05] 



(a r = x r mod p<ptnMp) 



U:=2 m mod P 
U sqr :=2 2n U mod P 



5030 



A R :=x-U sqr -U-'mod P 



Ar^Ar • R 1 mod P 
(R := 2 n mod P) 



2/5040 
^2/ 5 °50 



(2050^ <) 



[06] 



(Ar=xR mod PO)ttU(2)) 



U:=2 m mod P 
U , spr :=2 n4ffl U mod P 



7S 



6030 



A R :=xxU 'sqr xU ~ 1mod p 



Ar:=ArxU 1 mod P yiy 



6050 



(2050^<) 



5 
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[07] 



( W:=2 L U mod PcPfME ) U:=2 m 

"^2/ 7005 



mul:=0 



7010 



^ \a/.= 



W: =2x(2 m — 2 (m_n) P) 




7030 



W.=W-2^- n -'>P / 2/ 




7050 



YES 



7090 



W:=WYU-'mod P 



J 



( RETURN W ) 



7140 



Y:=YYU-'mod P 



7150\ fs jL:=L»1 
" 1 



El * WIT 1 **, 
U-' := 2"" 1 mod P 



6 
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CHS] 



8 



( W=x d P mod PcPftir ) 

^8020 



R^'toxJ P 



I 



I 



Ar:=x R mod P Y2X m ° 

^2/8040 



R| MV :=2 n rood P 

*l TOTAL : = < R INV> T P 




8200 



W:=WxRmod P 



<T dP and 2 n ? J> 1 8080 



W : -W x A R mod P 




( RETURN Wf) 



8220 
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[09] 



( R:=2«- mod P<Pftg ) 



9010 ^ R:=2 



mul :=0 Yl/ 
I 



9005 




Y:=tt ' 



mul :=1 



? ^1301 gup. 



R:=RY mod P 



9090 



C RETURN R ) 



9140 



R:=R*Rmod P 



9150 L:=L»1 



8 
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[Ml 0] 



1 o 



C R >wv : =2 1 "»d P<P§t jr 1 

I , 

mul:=0 /l/\Om 



10010 



H R|hv:=0 + P)»1 



Y:=R, 




il:=1 



Y:=R INV Yraod P 



10130. 



10110 



10090 



{ inv := R|mvY mod P 



10140 



( RETURN R IWV ) 



^ I nv ■ ~^ i Nv*Ynx>d P 



10150 \^ 



L:=L»1 
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imi i] 



1 1 



(Rihv^- 1 - mod ?Ot\n) 



110T0 



11020, 



M TOTAL* _ n INV 



VN i.- n 



11030, 



R I TOTAL ' - R I TOTAL*^ I TOTAL P 



11040 



I 



Vn j:=M 



11050 




YES 



11060 ^R 1T0TAL :=R*R ITOTAL mod P 



(RETURN R, total ) 



[HI 2] 



250 
200 
150 
100 
50 



1 2 



x mod p <&e-:/hftfc<*:tf/\Si/^'!7X-r> 



D □ □ 



□ 

D □ q 



a □ 



QOD 



▲ a u o 

o a 



a • d □ a 

, L. 



50 100 150 200 250 

x mod p (Dlf*>hfi 
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[013] 



1 3 



x-2 n mod p <D\dv\*&te£lf'\S.^<fO^<<h 



250 
200 
150 
100 
50 



D O 



□ n O □ _ n ° 

□ oo ° OOD ° a oo a O oa° ° 



50 100 150 200 250 

x mod p (Ohf'Vhft 
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[**«] m#tm 
mm: 

x mod p STgLSff-^fJC, r0 5j tC^-T J: ?fC2" (m+n) mod 
P 3bL<it, 2"(2n) nod p£&£, *»C*bx{C* CTfefS, 2"(-n)%0< 
tt, 2"(-«)^i!iT, 2"n x mod p &ff-jrr*. > dT^ U V%S« 

^J^#(Z)*^iC. (2*(-n))*(2"n-l) mod p fcfH SAHEf £ 0 
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rfO. / J. 
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50300100380 

mAmm±m 0097 
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§§8M## (0 0 0 0 0 5 1 0 8] 

1. MM^MB 1 9 9 0^ 81310 

ft ft JRIi s fftfflKttB3«M^4 TS 6#«S 
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